EXPLICIT METHODS FOR RADICAL FUNCTION FIELDS 
OVER FINITE FIELDS 
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Abstract. We develop explicit formulas and algorithms for arithmetic in rad- 
ical function fields K/k(x) over finite constant fields. First, we classify which 
places of k(x) whose local integral bases have an easy monogenic form, and 
give explicit formulas for these bases. Then, for a fixed place p of k(x), we 
give formulas for functions whose valuation is zero for all places *p | p except 
one, for which it is one. We extend a result by Q. Wu on a fc[x]-basis of its 
integral closure in K, show how to compute certain Riemann-Roch spaces and 
how to compute the exact constant field, resulting in explicit formulas for the 
exact constant field together with easy to evaluate formulas for the genus of 
K. Finally, we show how to approximate the Euler product to obtain the class 
number using ideas of R. Scheidler and A. Stein and give an algorithm. We 
give bounds on the running time for all algorithms. 

1. Introduction 

There exist a lot of very general algorithms to perform explicit arithmetic in 
global function fields; for a good overview, see |Die08j . In theory, all arithmetic 
operations have a running time polynomially bounded in \ogq and certain other 
invariants, but in practice, these algorithms are often slow compared to more spe- 
cialized solutions. 

For example, if one compares how general methods for arithmetic perform in 
elliptic function fields, it turns out that these methods are extremely slower than 
working with points on the corresponding elliptic curve instead. Besides elliptic 
function fields, one also has very efficient and optimized arithmetic for hyperelliptic 
function fields [CFA + 06 . Besides these, there are other classes of function fields 



for which specialized arithmetic exists, for example, cubic function fields |Bau04[ 
ISchOlj , C a b function fields and superelliptic function fields [GPS02| . 

In this paper, we will concentrate on radical function fields, i.e. function fields 
of the form K = k(x,y), where y satisfies an equation of the form y n — D with 
D G k[x) and n is not divisible by the characteristic of k. Hyperelliptic curves in 
characteristic 7^ 2 are a special case of radical function fields, as well as superelliptic 
function fields: the latter are radical function fields with one place at infinity and 
where D is a squarefree polynomial. Hence, our methods extend results for these 
special cases. 
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In the case of radical function fields over finite constant fields, not much work has 
been done in the direction of explicit arithmetic. One notable exception is a result 
by Q. Wu, which gives an explicit fc[a;]-basis of the integral closure O of k[x] in K 
Wu09] under the assumption that D G k[x] is n-th power free. We will reformulate 
his result in Section [4] to work for all D G k(x). 

To do explicit arithmetic in K, we present algorithms which compute local as 
well as global integral bases. The goal is that these bases are as explicit and simple 
as possible. For most places p of k(x), one can give a very simple monogenic basis 
of the integral closure (D' p of o p in K, i.e. one give an element of the form p = y'/V"' 
such that Op = o p [p}; here, ir is a uniformizer for p. We use this to give an easy 
algorithm for computing all places *P of K lying above a place p of k(x). Moreover, 
we find elements /tp G K* for *p | p of a simple form such that iAp(/"<rj) = I and 

These methods allow to use the algorithm of F. HeB to compute Riemann-Roch 
spaces [Hefi 02 . and our methods allow to give an explicit bound on the running 
time of the algorithm assuming that the divisor is given in form of a fc[a;]-basis of 
a fractional O-ideal together with integers for the infinite valuations. 

We then use the theory for Riemann-Roch space computations to compute the 
exact constant field of K/k(x) as the Riemann-Roch space of the zero divisor. This 
results in an explicit criterion when k is the exact field of constants, and furthermore 
we give an explicit fc-basis of the exact constant field k' and an explicit and easy to 
evaluate formula for the degree [kf : k\. This, in turn, allows us to give an explicit 
formula for the genus of K/k(x). 

Finally, we apply the Euler product approximation of R. Scheidler and A. Stein 
SS09] to radical function fields. We reformulate their approximation of the class 
number to make it better suited for numerical evaluation, and provide explicit 
algorithms to compute the approximation. Our discussion includes a bound on the 
running time in binary operations. 

All algorithms in this paper, except the Euler product approximation in Sec- 
tion [9j have been implemented by the author in CH — h, and are used to do explicit 
arithmetic in the divisor class group of a radical function field using infrastructure 
methods (see |Fon09] ). 



1.1. Notation. Let k be a field and n G N, n > 1 coprime to the characteristic 
of k. Let D G k(x)* such that Y n — D G fc(x)[F] is irreducible; then D ^ a 1 for 
all a G k(x) and all divisors t of n, t > 1. Let K = k(x,y), where y is a root of 
Y n — D. 

Write D = sgn(C) • n"i with sgn(£>) € k* and . . . , /_ 2 , f u f 2 , ... a 

sequence of pairwise coprime squarefree monic polynomials, almost all of them 
being 1. For convenience, define f := 1. Note that the condition D ^ a 1 for all 
a E k{x) is equivalent to sgn(Z?) not being a i-th power or /j ^ 1 for some i e Z 
with t \ i. Moreover, note that checking whether an element is a i-th power in ¥ q 
can be effectively done; see Corollary Q] 

We denote the set of places of a function field K' by Fk>- For p e Pjf, let 
Vp : K' — > Z U {oo} be the surjective valuation of p. If K" /K' is an extension of 
function fields and p G F K <, *P G Pk", we write \ p if , and only if, n K' = p. 
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For a place p G Wk(x)> let o P be the valuation ring of p with maximal ideal m p 
and let O p be the integral closure of o p in K. Moreover, write fc(p) := p /m p for 
the residue field of p. 

For a place *p G Pk, let 0«p be the valuation ring with maximal ideal m*rj. If 
p = <P n k(x), let e0P | p) = be the ramification index of over p (where 

t G satisfies Vp{t) 7^ 0) and f(ty | p) the extension degree [0<p/m<p : «(#)]. 

Let poo be the infinite place of k(x), i.e. the one whose valuation is given by 
^poo(g) = degg — deg/ for f,g G 5 7^ 0; this place is the only pole of x. We 
use the abbrevations Ooo :— o Poo and 0oo := O p ^. Moreover, we denote by O the 
integral closure of k[x] in K. Finally, we call the places of K above poo the infinite 
places of K; all other places are called finite places. 

2. Monogenic Integral Bases and Splitting of Primes 

In this section, we develop a criterion when a place p G Pk(x) with uniformizer tt G 
k(x)* possesses a monogenic integral basis of O p of the form y l TT J with i, j G Z in 
Proposition [TJ Moreover, we show how a local integral basis can be constructed in 
any case. Then, we show how to find elements in K* which have valuation 1 for 
one place | p and valuation for all other places lying above p in Proposition 

We begin with a result on monogenic integral bases and the places of K lying 
above a place of k(x). 

Proposition 1. Let p G Pk(x) and d := gcd(n, v p {D)). Then there exists an 
element z G K such that O p — o p [z\ and z n G k{x) if, and only if, d G {l,n}. 
To be more precisely, let tt G o p be a uniformizer for p. Then we have: 

(a) If d = 1, let a, b G Z with avp(D)-\-bn = 1. Then z := y a 7r b satisfies O p = Op[z]. 
The minimal polynomial of z over k(x) is Z n — D a 7r nb . 

Moreover, p totally ramifies in K, i.e. there is exactly one place G Vk 
lying above p and e(^3|p) = n, /(^P|p) = 1. Finally, vy${z) = 1. 

(b) If d = n, let b G Z with nb = —v p (D). Then z := yTT b satisfies O p — p [z]. The 
minimal polynomial of z over k(x) is Z n — Dtt^" p< ' D K 

Moreover, p is unramified in K , i.e. all places G Vk lying over p satisfy 
e(^p|p) = 1. The degrees of the places are determined by the factorization of 
Z n — a over n(p) = o p /m p , where a = D-K bn + m p 7^ 0. Finally, iAp(z) = for 
all *p lying above p. 

(c) If 1 < d < n, the ramification indices of the places G IP lying above p are 
given by § . 

In any case, an integral basis of O p is given by 

V / 4 = 0,. ..,71-1 

The results on the ramification and splitting are well known; see, for example, 
[Sti93l p. lllf, Proposition HI.7.3]. 

Proof. By [Sti93l p. Ill, Proposition III.7.3 (b)], e(<P|p) 
for all places lying above p. This shows that v^(y) 
^e(ty\p)vp(D) — 2Vp(D) for any place <P lying above p. 
Now, let us consider the three cases. 



= = and d(?p|p) = 5-1 



4 



FELIX FONTEIN 



(a) Let d = 1; then e(*p | p) = n, whence p totally ramifies in K. Let a, b € Z with 
a^p(Z?) + fen = 1 and set z := y a ir b . Clearly, k(x)(z) = k(x)(y) as a is coprimc 
to n, whence the minimal polynomial has degree n. Now z n = (y n ) a ir bn — 
D a Tr bn £ k(x), whence ip := Z n — D a ir bn is the minimal polynomial. 

Thus, we have JAp(z) = avy${y) + bu^{ii) = av p {D) + 6e(*p|p) = 1. Now 
<p'(z) = nz n - x , whence u^(cp'(z)) = n-1 = d(q$\p). Therefore, by [3ti93l 
p. 96, Theorem III.5.10], Q' p = o v [z\. 

(b) Let d = 



If b 



MR) 



and z := yTr 6 , then v<$(z) = ZAp(y) - ^^-v^{-k) = 



ij/p(D) — 2 v p{D) — 0. Moreover, clearly k(x)(y) = k(x){z) as ~ G fc(x). 

= Z" - L)7r bn = 
= = e(qj|ti) - 1. 



Hence, the minimal polynomial is given by <p := Z™ — z" 
Z" - Dir- U ^ D ~>. Again, 93' (z) = uz™" 1 , whence v<${tp'{z)) 
Therefore, by [Sti93l p. 96, Theorem III.5.10], O' = o p [z] 



By Rummer's Theorem [Sti93, p. 76, Theorem III. 3. 7], the factorization of 
Z n — (Dn^"'^ + trip) over «(p)[Z] gives the places of K lying above p. 
(c) Let 1 < d < n. Assume that a z exists with minimal polynomial Z" — a 
such that 0' p = Op[z]. Let P : o p — > «(p) the projection. Then, by Kummer's 
Theorem [Sti93l p. 76, Theorem III.3.7], the factorization of Z n - P(a) £ 
ft(p)[Z] determines the ramification indices and relative degrees of the places 
of K lying above p. 

If P(a) = 0, the polynomial factors as Z n , whence p totally ramifies in K: 
but then n — e($P|p) = 5, whence d= 1, a contradiction. 

In case 7^ 0, the polynomial Z™ — P(a!) is squarefree as n is coprime to 
the characteristic of ft(p). Thus, 1 = e(^3|p) = ^ for all place <}3 lying above p: 
therefore, d — n, a contradiction. 

Thus, if 1 < d < n, such a z cannot exist. 

n-i I 
Finally, we want to show that O r p = (J)" = o °p z ii where Zi :— ir L » Jy\ For 

that, we use a similar argument chain as in |Wu09[ Section 3], which simplifies a 

lot in this special case. Let ^ be a place lying above p. First, 



w P (£>) 



Now 



0. Therefore, z, G O'. Now 



n = iv v (D) — ((iv v {D)) mod n), whence v<#{zi) = Lil^-LEil mod ") > 
Zi £ Op. Now 

n-1 

disc(z , . . . , z n ) = disc(l, y, . . . , y™" 1 ) • ?T 



^p(-p) 



i=0 



whence 



Now 



,(disc(z , . . . ,z„)) = z^(disc(l,y, ...,y n 1 )) - 2^ 



i=0 



^p(disc(0;)) = V d($\p)f($\p) = n--n = n-d, 
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whence it suffices to show that v p (disc(;zo, ■ ■ ■ , %n)) = n — d. First, note that 

i/ p (disc(l, y"- 1 )) = v p (D)(n-l), 
whence we have to show that 

n-l 

v p (D)(n-l)-2j2 

i=0 

Define s := u p (D), then this simplifies to s(n — 1) — ^Y^hZq \_~\ — 71 ~ gcd(n, s). 
But this is actually shown in |Wu09[ Proposition 3.1]. □ 

We now want to construct elements /<p, for \ p, which satisfy 

(*) Mfv) = i and W \p,V ^¥--vy(.h) = 0- 

The ring 0' p is a principal ideal domain whose non-zero prime ideals correspond to 
the places \ p, where ^ corresponds to the prime ideal m?p D 0' p . Any generator 
of rrupHOp satisfies (*), and vice versa, any element /sp satisfying (*) is a generator 
for mtp n Op. Hence, these elements /tp allow us to describe the non-zero prime 
ideals mtp n O p in an elegant way. 

This will be used in Sections [5] and [6] to directly write down an Ooo-basis for the 
O^-ideal a with iAp(a) = t<p, when integers i<p € Z, \ p are given. 

Proposition 2. Let p G Pfc(^) and d := gcd(n, v p (D)). 

(a) If d — 1, let a,b eZ with av p (D) +bn = 1. Then z := y a ir b satisfies vq${z) = 1 
for the only place *P G Vk lying above p. 

(b) If d > 1, Zei a, 6 G Z swc/i i/ia£ + b vp P = 1. Let ix be a uniformizer for p 
and set tt' := Tr a y b . If d — n, we can choose ir' = tt. 

ie< P : o p — » k(p) 6e £/ie projection and let a := P(Dn~ l ' v ( D ^). Let the 
factorization of Z d — a over n(p) beYii=i9i with pairwise distinct monic prime 
polynomials gi G «(p)[,Z]. Let gi £ P [Z] be monic polynomials with P{gi) = gi, 
1 < i <t; in case degp = 1, we can choose gi = gi. 

If di := 7r'Op + g i {y'K' v ^ D ^l d )0' s? , then ai,...,a t are exactly the non-zero 
prime ideals of 0' p . Let tyi G P# be the place corresponding to ai, i.e. m<^ i H 

(i) Ifd = n: 

For z^ :— gi{y , K~ vp ^ D ^ d ) and z'p := z^ + ir, we have v^.{z\ ) — for 
j 7^ i, s = 1,2 (or = OJ, and we Ziaue ZAp i (^j- ) > for both s, and 
zAp. (z.p-') = 1 for at least one s. 

Moreover, v^js^z^) > 1 is the case if, and only if, -k g" z^O' p . This is 

the case if, and only if, i/ p (NorsxiK/k(x)( z i )) > 1- 

(ii) If d <n: 

For Zi :— gi(yir~ v * ( D ^ d )+Tr' , we have v^. (z^ = for j ^ i and fsp 4 (z^ 
I In particular, Oi = ZiO p . 

Proof. The case (a) was already shown in the previous proposition. Now, con- 
sider (b). First note that tt' is a uniformizer for every place of K lying above p: 
z*p(V) = ai"p(7r) + &ZAp(y) =a^ + b\v p {D) = 1. 

Let p := y n l d and if' := k(x)(p); then the minimal polynomial of p over fc(x) 
is Y d — D, and the minimal polynomial of y over K' is — p. Note that if 



gcd(?i, !/„(!))). 
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is a place of if' lying above p, then e(^P|p) = 1 as d \ v p (D). Thus, v<$(p) = 
^iAp(-D) = 2 v p{D) is coprime to 4: this shows that the extension K/K' with 
if = K'(y) of degree n/d is totally ramified in Moreover, the extension if' /k(x) 
with if' = k(x)(p) is unramified in p. (In case d = n, if' — if .) 

Now z := p-K^ v f{ D )l d satisfies O p H K' = o p [z] by part (b) of the previous 
proposition. Let P : o p — > «(p) be the projection and a :— P(Dn~ Uf ( D )); as 
i/p(£)7r-^(^) = we have a ^ 0. Now (Z d - a)' = dZ^ 1 is coprime to Z d - a, 
whence Z d — a is squarefree. Let the factorization of Z d — a over re(p) be Ili=i ff« 
with pairwise distinct monic prime polynomials g L £ n(p)[Z]. Let gt £ o p [Z] be 
monic polynomials with P(gi) = gi, 1 < i <t. 

By Rummer's Theorem |Sti93[ p. 76, Theorem III. 3. 7], the places ^3 £ Pk< lying 
above p correspond to the gi. Let be the place corresponding to <ft. Now 

(*) m (f!i n (O p n x') - vr(o; n if') + Hz)(o' p n if'). 

If §i(z) = 0, we must have deg^ = d, whence tyi is the only place lying over p. 
As K/K' is unramified, there is exactly one place of if lying above p. In this case, 
we get that /$ = it' satisfies the condition. Hence, we assume that g%{z) ^ for all 
i. 

By (*) we see that urp^g^z)) = for j ^ i and vySi(gi{z)) > 0. As v& (n) = 1, 
we have Vsp^g^z) + n) = 1 in case ityi{g%{z)) > 1. Moreover, it £ gi(z)(O p n if') 
if, and only if, 1 = vrp^ir) > zAp. ((^(z)). As ZAp. (gj(^)) = < ZAp. (7r), we also have 
J/ q3j(ft( z )+ 7r ) = f° r i ^ Finally, ^(Norm^/fe^fft^)) = J]<p|p ^( z ) = 
This shows (b) (i), i.e. the case n = d. 

Now assume d < n. In that case, *Ap 4 (<?»(£)) = ^i>m .{9i{ z )) — 2 ^ ^' whence 
zAp ; (§i(z) + 7r') = 1. Moreover, as before, i>y$Agi(z) + it') = for j ^ i. Finally, 
note that this implies (§i(z) + Tr')O p = m<p i n OL And as it' and cji(z) clearly lie 
in this ideal, we have = §i(z)0' p + tt'O'^. □ 

We have seen how to, given a place p £ ^k(x), 

• decide whether an easy monogenic basis for O p exists and, if yes, how to 
obtain it; 

• find an easy to describe integral basis for O p ; 

• find all places *P £ Pk lying above p; and 

• find generators of the non-zero prime ideals rritp n 0' p of O p . 

To compute these, we need to compute 

(a) greatest common divisors of two integers and the corresponding Bczout identi- 
ties, 

(b) a uniformizer for a place p £ Pfc( x ), 

(c) the projection P p : o p — > «(p) for a specific element of P , 

(d) the factorization of a polynomial of the form Y n — a in some re(p)[F]. 

The first can be done using the Extended Euclidean Algorithm (see [vzGG03] ). For 
(b) and (c), distinguish between the infinite place poo and the finite places. 

For p = poo, we have ft(p) = k, and a uniformizer is given by tt — -. If 
/ = A| £ k(x)* with g, h £ k[x] monic and A £ k* , then 




if dcgg < deg h, 
A if deg g = deg h 
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Now assume that p is a finite place, corresponding to a monic irreducible poly- 
nomial p £ k[x]. Then we can choose tt — p, and we haveK(p) = k[x]/(j>) and 
Pp(f) = / + (p)- I n particular, if p = x — A, then n(p) = k and P(f) = /(A). 

This allows us to describe the residue field /c(p) and compute the residue map 
Pp for all places of k(x). 

We are mainly interested in the case that k = ¥ q is a finite field of q elements; 
in this case, «(p) is a finite field of g degp elements. In that case, factorization of 
polynomials is well understood vzGG03, Section 14]. The special case of radical 
polynomials Y n — a is even easier, if one does not need to know the exact fac- 
torization but only the number of degree d prime divisors for all d > 1. We will 
investigate this in the next section. 



3. On the Factorization of Y n — a over a Finite Field 

In the following, we are interested in obtaining information on the factorization 
of Y n — a over a finite field k = F q , where n is coprime to q and a / 0. These 
assumptions imply that Y n — a is squarefree and that all roots are non-zero. We 
will give an explicit algorithm (Algorithm 13. 3p which computes the degrees of the 
irreducible factors of Y n — a over ¥ q , and bound its running time. 

First, we are interested in the roots of Y n — a in a specific extension F g m of F 9 , 
m > 1. The in ¥ qm are exactly the roots of gcd(F" — a.Y' 1 ™^ 1 — 1). By taking 
a generator (3 of ¥* m and solving the Discrete Logarithm Problem (3 X = a, it is 
possible to reduce Y n — a to a linear equation modulo q m — 1. The same can also 
be achieved by explicitly computing gcd(F" — a,Y q _1 — 1), which can be done 
completely without polynomial arithmetic: 

Lemma 3.1. Let k be any field and a, ft £ k \ {0}. Consider Y n — a and Y rn — ft 
with n,m £ N>o- Write gcd(n, m) = Xn + fxm with A, fJ, £ Z. Then 



gcd(Y n - a,Y n - ft) = 
It can be computed using the following algorithm 



ygcd(n,m) _ ay. u Q gcd( ™, m ) = ^gcdt", 

1 else-wise. 



Algorithm 3.2: Computing gcd(F" — 


a, Y rn - ft) 


/ m n\ 




(1) SetA:=\0 1 = (ay)«. 




\1 Oj 




(2) While an ^ 0, do: 




(i) Compute q :— an mod an (so 


that < q < an). 


(ii) SetB:= J). 




(iii) Set A:= A B. 




(3) Compute c := a a21 ft a31 . 




(4) If c ^ 1, return 1. 




(5) Set 7 := a a22 ft a32 and return Y ai2 - 


1- 



Proof. One obtains this by following the Euclidean Algorithm applied on / and g. 
For that one has to investigate what the long division of Y n — a by Y m — ft does. 
Write n = qm + r with < r < to; as (Y m ) q — ft q is divisible by Y m — ft, we can 
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write Y mq = /?<? + h(Y){Y m - [3) with h £ k[Y]. Then Y n - a = (Y m ) q Y r -a = 
h(Y)Y r (Y m - (3) + f3 q Y r - a, whence 

(Y n - a) mod(y m -ff) = [3 q Y r -a = (3 q {Y r - a/T 9 ). 

□ 

This allows us to give a precise answer about the number of zeroes of Y n — a in 
Corollary 1. Let m € N and let d = gcd(g ro - l,n). Then Y n - a € F g [Y] /las 

q m - 1 

zeroes in ¥ q m if, and only if, a 3 =1. If that is the case, it has precisely d 
zeroes. 

Proof. The number of zeroes of Y n — a in ¥ q ™ is given by deg gcd(F 9 — 1, Y n — 
a). The degree is > by the previous lemma if, and only if, l^a^ 3-3 = 1, 
which is the case if, and only if, a 3- ! =1. If this is the case, the degree of 
gcd(F 9 _1 — 1, Y n — a) is gcd(g™ — 1, n) by the previous lemma. □ 

Note that this can be proven alternatively, without the use of Lemma 13.11 

Alternative proof of Corollary\j\ Write F* m = for a primitive element (3. Write 
a = (3 X with i£N. Now (3 y is an n-th root of a if, and only if, ny = x (mod q m — 1). 
But this is known to be solvable if, and only if, d := gcd(q m — l,n) divides x; in 
that case, there exist d solutions. □ 

Moreover, we can determine the splitting field of Y n — a: 

Corollary 2. The degree of the splitting field ofY n ~ a over ¥ q is given by 

ord z / nordF ,( Q ) Z (g). 

Proof. Let m € N>o- Then the condition that Y n — a splits over ¥ qm is equivalent 

q m -1 

to gcd(g m — l,n) = n and a^i'" 1 - 1 '" 1 = 1. This is easily seen to be equivalent to 
nord F .(a) | {q m - 1). □ 

Note that there is a field-theoretic interpretation: in case a field L contains all 
solutions of Y n — a, a =/= 0, it must contain a primitive n-th root of unity. Now ¥ q m 
contains such a root if, and only if, n \ (q m — 1) as F* m is cyclic of order q m — 1. 
Finally, a field L containing a primitive n-th root of unity contains either none or 
all roots of Y n — a. 

We now want to compute the degrees of the irreducible polynomials appearing in 
the factorization of Y n — a over ¥ q . For that, it suffices to determine the number n m 
of roots of Y n — a in ¥ q m which do not lie in any subfield, m > 1. Then the number 
of irreducible factors of degree m is given by ^ . 

Hence, this can be done with the following algorithm: 

Algorithm 3.3: Compute the degrees of the factorization of 

Y n — a over ¥ q 

Input: n € J^I>o, a prime power q, a 6 ¥ q . 

Output: a list (ai, . . . , a m ) such that is the number of irreducible 
factors of Y n — a of degree i. 

(1) Compute m" = ordF*(a), m' = ord(z/„ m »z)* (q) and set m = 
min{m', n}. 
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(2) Set a\ = ■ ■ ■ = a m = 0. 

(3) For i = 1, ... , to, do: 

(i) If i { mf, continue with the next i. 

(ii) Compute d = gcd(g l — l,n). 

(iii) If to" does not divide 9 7 , continue with the next i. 

(iv) For j = 2, ... , L^J , do: 

(a) Set di.j = a-i.j — (ttj + d). 

(v) Set 0* = 

(4) Return (ai, . . . , a m ). 



Proposition 3. T/ie algorithm computes the degrees of the factorization ofY n — a 
over F q in 

0(n log 3 n + n log n • log 2 q + log 3 g • log log q) 

binary operations. We assume that the factorizations ofq — 1 and n are given, and 
the factorization of p — 1 for every prime p dividing (q — l)n. 

Note that the time required to factor n and all p — 1 for p \ n is subexponential 
in logn for each of this numbers. Hence, the time required for this is less than 
O(nlogn), i.e. it is negligible compared to the total running time of the algorithm. 

Proof. By Corollary [21 mf is the degree of the splitting field of Y n — a over ¥ q . 
Hence, the degrees of all possible irreducible factors of Y n — a divide mf. Moreover, 
the maximal degree of such a polynomial is bounded by m. 

Now let i be a divisor of m" which is < m, and let d — gcd(g 4 — l,n). Then, 

by Corollary [TJ Y n — a has roots in F g ; if, and only if, a 2 "^ - = 1, i.e. if, and only 

if, the order of a divides In case it has roots in ¥ q i, the number of roots 

is d, again by Corollary [TJ Now we have to subtract from d the number of roots 
already lying in subfields of ¥ q i or, alternatively, one subtracts the roots lying in 
subfields from ai when their number is determined; the latter is done in the loop 
in Step (3 iv) . Finally, one divides the number by i as ¥ q i /¥ q is Galois and the 
minimal polynomials of the roots in F g « which lie in no subfield have degree i. This 
shows that the algorithm is correct. 

Now m" = 0(q), mf = 0(nq) and m = 0(n). Computing gcd(g l — 1, n) can be 
done by first evaluating q l — 1 modulo n and then computing the gcd, whence this 
requires C(logz • log 2 n + log 2 n) C C(log i log 2 n) C C(log 3 n) binary operations. 
Moreover, to check whether ml' \ q —r- it suffices to evaluate q l — 1 modulo dm" = 
0(log(nq)), which can be done in O(logi log 2 (ng)) C C(log 3 n + logn dog 2 q) binary 
operations. Hence, the running time of the loop in Step (3) is 0(n ■ log n ■ (log n + 
log 2 q)) binary operations. 

As we know the factorization of q — 1, we can compute ml' = ordF*(a) using a 

fast order computation in 0{ '"ipgiog fog g 9 ) binary operations; see |Sut07[ p. 117, 
Proposition 7.3]. This algorithm will give the factorization of to", whence we 
know the factorization of nm" and can use that information to compute the fac- 
torization of 4>{nm"). Hence, the order of q in (Z/nm"Z)* can be computed in 
log (w<?) -log ) binary operations as nm" — 0(nq). In particular, Step (1) 
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requires 0{ ^ g7 0gl S g( ° S g ) ) Q 0{\og 3 n ■ log log n + log 3 q ■ log log?) binary opera- 
tions. 

This gives the stated total running time. □ 

This section shows how to compute the degrees of the prime factors in the fac- 
torization of Y n — a over a finite field. We have seen in Proposition [1] that this 
allows us to describe the degrees of the places of K lying above a place p € fk(x) ■ 
This completely suffices to determine whether K has an infinite place of degree one 
or to compute the Euler factor for p in Section [5J It does not suffice, though, to 
describe the places lying above p as in Proposition^ for that, we need to compute 
the prime factors in the decomposition. 

To factor Y n — a, one can first compute the number of prime divisors of 
degree d for all d > 1 as sketched above; as a side result, this algorithm can 
compute gcd(F" — a, Y q _1 — 1) as well and use the same technique to eliminate 
all prime divisors of degree < d. Then the resulting polynomial hd £ ¥ q [Y] is of 
degree n^d, and is the product of distinct prime factors of degree d, to which, 
for example, the Cantor-Zassenhaus algorithm can be applied (see |vzGG03] ). 

4. Integral Bases, Part 2 

In this section, we want to generalize a result of Q. Wu [Wu09j on how to give 
an explicit fc[x]-basis of O, the integral closure of k[x] in K. We will need this for 
computing Ricmann-Roch spaces in the next sections. 

Moreover, we will give an inequality for the degree of a certain rational function 
appearing in the integral basis and give a precise statement when equality happens; 
this will be important for the determination of the exact constant field of K/k in 
Section [71 



Define 



then k{x,y) = k(x,z) and 



y n fi 



-|i/"J. 



oo n—l / oc \ j 

z n = sgn(D) J] /r° d "=sgnp)n( II = : b e 

i— — - oo j=l M=-co 

For j = 1, . . . , n — 1, define 

oo 



- — oo 



then Gi, . . . , G„_i are pairwise coprime, monic and squarefree polynomials such 
that 



z n = sgn(D) FJ G\ = D. 
i=i 

If we set Di := ]\ n rl for j e {0, . . . , n - 1}, then 



a = n ( n *M ) = n / 

j — 1 k— — oo 
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By [Wu09j . z'/Di, i = 0,...,n- 1 is a A;[x]-basis of its integral closure in K. Now 



j = -oo 



with 



A : II / 



M+*L*J 



n / 



J——OO j — — oo 

In particular, A = 1. Note that we no longer have A = 1 in general; this only 
happens if fi — for i < and for i > n. Hence, we have proven: 

Theorem 4.1. Let if = K(x,y) where y n = D with D e k(x)* . If D = 
sgn(-D) Ili^-oo fi * s ^ e squarefree decomposition of D and if 



A 



n / 

j=— oo 



then Dq = 1 and 



1. 



y y 



y 



n-l 



A' A' ' A-i 

is an integral basis for O, the integral closure of k[x] in K 

We will now compare the degree of A to i degD 
make statements on the exact constant field of K . 

Lemma 4.2. Let i € {1, . . . , n — 1}. 



□ 



which will later allow us to 



(a) We have deg A < 

(b) We have deg A = 



• dc S D 



< 



• deg D 



if and only if 



VjeZtdeg/^OVnlij. 
Proof. First, as [aj + L^J — L a + f° r an a, 6 € M, note that 

oo . . oo 

de s^= E - deg/ ^ E 



— deg 

n 



< 



E if de g/j 



j = -oo 

deg Z? 



< 



.deg I? 



This shows (a), and moreover it shows that (b) is equivalent to that the following 
three conditions are satisfied simultaneously: 



(1) VjeZ: LlJdeg/, = 

(2) E£-oo Lf de S/iJ = 

(3) L^degA] = [£deg£> 
Now (3) is clearly equivalent to 

(3') n | 



Ideg/,]; 
E^-oofdeg/, 



; and 



ideg-D = ^2 ij deg f ) 

3=1 
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To attack (1) and (2), note that [a\ + [b\ = [a + b\ if, and only if, {a} + {b} < 1; 
here, {a} := a — [a\ is the fractional part of a. Then, (1) and (2) are equivalent to 
(1') and (2'), respectively: 

(!') VjGZ:{^}deg/ i <l 

oc 

(2') ^{fdeg/ J }<l 

j=—oo 

Now {^} = a m ° d " , whence these conditions can be rewritten as 
(1" ) V j G Z : (ij mod n) deg < n 

oo 

(2" ) (ij deg /j mod n) < n 

j=— oo 

Note that (3') is the case if, and only if, n | 5ZjL_ 00 (ij deg/j mod n). Therefore, 
(3') and (2") are together equivalent to 

oo 

(4) w de e /j m ° d n ) = °> 

j=— oo 

which is clearly equivalent to 

(4') Vi€Z:n| (ijdeg/j). 



Thus, deg A 



is equivalent to (1") and (4'), i.e. to 



(5) V j E Z : (ij mod n) deg /_,• < n A n \ (ij deg fj ) . 

If deg fj — or n | ij, we clearly have (ij modn) deg fj < n An | (ij deg /y). Hence, 
assume that deg fj > and n j ij. In case n \ (ij deg fj), we have gcd( -„ deg/ ) I 
whence ijmodn is a multiple of gcd ^ ra ; d e g/ ) • -^ u ^ *j m odn ^ as n \ ij, whence 
i j mod n > — rr-73 — ft- But then, 

(ijmodn) deg fj > n f° S / 3 , > n. 

gcd(n,deg/j) 

Therefore, (5) is equivalent to V j G Z : deg/j = OVn | ij, what we wanted to 
show. □ 



Hence, we saw how to obtain a fc[a;]-basis of the integral closure O of k[x] in the 
radical function field K, which is easy to write down once one has the squarefree 
decomposition of D[x)* . This basis is of the form -*=r with < i < n, i.e. it allows 

to efficiently test an element / = ^27=0 a iU % ^ K with <2j G k{x) for being integral: 
this is the case if, and only if, D^ai G k[x] for < i < n. Moreover, we need this 
result to describe the size of certain transformation matrices in Section [6j as well 
as finding formulas for the degree of the exact constant field over k and the genus 
of K/k, which only depend on the numerical data (n, (deg/j),gz) (see Sections [7] 
and E]) . 
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5. Matrix Representation of Uniformizing Elements for the Infinite 

Places 

This section prepares work for the next section. We want to find a matrix rep- 
resenting certain uniformizing elements for the infinite places and make statements 
on the size of the entries of these matrices and their inverses. The final, quantitative 
result is given in Proposition 01 

Let pi, . . . , p s be the infinite places of K/k(x). Then there exist elements hi G 
Ooo with v Vi (hi) = 1 and v Pj (hi) = for j ^ i, as described in Proposition^ 

I - - dcg D 

We have seen that wq, . . . ,w n -i with Wi — y l x^ « J is a Ooo-basis of 0^, 
and at the same time a fc(x)-basis of K. Hence, we can represent hi and h~[ as 
n x n-matrices Mi and M~ x over k(x) with respect to this basis, by interpreting 
them as fc(ir)-vector space endomorphisms of K given by 

v i !■ hiV and v i— > hf 1 v (v G K). 

We are interested to give bounds on the numerators and denominators of these 
matrices. More precisely, given a matrix M = (m^)^ G k(x) nxn , we define 
degM = max.jj degmjj. The denominator of M is a monic polynomial d G k[x] 
of minimal degree which satisfies dM C k[x] nxn , and the numerator of M is dM; 
hence, we are interested in upper bounds for degii and deg(iiM). 

Note that deg(AB) < deg A + degB and deg(A + B) < max{deg A, deg B} for 
all A, B £ k(x) nxn . Moreover, note that the strict triangle inequality does not hold 
in general, and that deg is not multiplicatively as soon as n > 1. 

We first begin with a small lemma on Bezout identities: 

Lemma 5.1. Let a, b G N>o such that d :— gcd(a, b) > satisfies d < min{a, b}. 

(i) There exist \, /i with < A < \ and < fJ, < % such that d = Aa — fib. 

(ii) There exist A', fi' with < A' < h and < /i' < § such that d = — X'a + /i'b. 

Proof. Let A", fj," G Z be arbitrary with d = X"a + /j."b. Then the set of all solutions 
of d = aa + (3b is 



{(A" +4, //'-*§) I^GZ}. 

X : 

there is exactly one such x. Then 



(i) First assume d < b. Choose x such that < A := A" + x^ < 4. Note that 



M:=-(M"-*5) = ^. 

whence 

d ab/d — d a d 

< a < — = . 

b ~ P b d b 

As < | < 1 we get < fx < §, as we wanted. 

In case d = b, we have a > b and d = 1 • a — — 1) • b. Then < fi := 1 < 

l = -!andO<A:=£-l<£ = §. 

(l — b b d 

(ii) This follows from (i) by switching a and b. □ 

Write Z) = sgn(D) with pairwise coprime monic polynomials D num , Ddenom 

k[x], and set Ddog := max{ deg D num , deg Ddenom}] note that Ddeg is the height of 
D £k(x). Note that 

OO oo 

^num = JJ fl G fc[x] and D denom = ]J /I, G fc[x]. 

i=l i=l 
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Lemma 5.2. Let f = ~Y^ = q a,ix bi y l £ K with en £ k, b{ £ Z. Define a matrix 
M = (m,ij)ij £ k(x) nxn such that fwj = Ym=o m ijWi- If d £ k[x] is monic and of 
minimal degree with dM £ k[x] nxn , then 

deg d < deg D denom + max{ [-6 min - ^] + 1 + max{deg D, 0}, 0} 

= max{ [-femin - + 1 + Aicg, deg D denom } =: A 



and 
here, 



deg(dM) < A + [b max - IJ + 1 + max{degL>, 0}; 



&min := niin{fei + £ deg D \ a* ^ 0} 
and 6 max := max{&i + £ dcgD | a, 7^ 0}. 

. I - - deg r> I r - deg p 1 

Proof. Note that = y 4 xL* ™ J = y l x ' l ™ . Therefore, 



Next, note that 





+ 


^dogD 




a dcsD \ [ 


n 




n 







.fcdeg 



= (6 _ a)^£ + i (((-6 deg D) mod n) - ((-a deg D) mod n)) , 

and the last term lies in the interval [— 1 + —, 1 — —]. 

Now we want to estimate deg dm^ as well as deg d itself. For that, we distinguish 
two cases. Both show that d must be of the form x e Ddenom for some £ £ Z, £ > 
—vo(Ddenom) as soon as / ^ fc, and allow to give conditions on £; here, vo(Ddenom) 
denotes the exact power of x dividing Ddenom- 
(1) The first case is i + j < n. In that case, 



— a%x 

In case a, ^ 0, we have 



> -hi + 



, r.degBl [ deg_D] 



; deg D 



and 



& 4 + 



■ dcg_D 
J n 



< - h - i dcgD + 1 - I < -6 min + 1 - I. 

Moreover, 

deg{x e m i+j}j ) <l + h + ±dcgD + l-±< 6 max + £ + 1 - ±. 
(2) The second case is i + j > n. In that case, 



mi-^-j—n^j — OiX 

In case a, ^ 0, we have 

I > -h + 



a deg D 
J n 



D d 

dcg_D 
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and 



■ dcgg 

J n, 



/ • - \ doe D 

[i+J - n)^- 



< - hi - i deg£> + degD + 1 - ± < -h min + degD + 1 - 1 
Moreover, 

deg(^m i+J - nJ ) < £ + 6i + i degD + degD + 1 - ± 
<^ + ^max + deg^ + l-i 

This shows that 

deg d = t + deg D denom 

< deg D denom + max{ [~6 min + 1 - £ + max{deg D,0}],0} = A 

and 

deg(a/D rfe „ om TOi,,,) < A + [6 max + 1 - i + max{degD,0}J 
as deg (x £ D denom m l tj ) G Z. □ 

Now let us consider Mj and M~ l obtained from choosing hi as in Proposition^ 

I i dog D I 

Remember that we have lit = x<- n ^y % - We distinguish between three cases: 

(1) gcd(degD, n) = 1, i.e. has exactly one infinite place. First, assume degD > 
0. Then, by Lemma \5. II (ii) there exist s,t G Z with 1 = — sdegD + tn with 

< s < n and < t < degD and we can choose hi := y s x~ t . 

Next, assume deg D < 0. Then, by Lemma 15.11 (i) there exist s,t G Z 
with 1 = s(— degD) + in with < s < n and deg D < t < and we can 
choose h\ := y s x~ t . 

(2) gcd(deg D, n) — n, i.e. the infinite places are unramified. Let tt : Oqo — > k be 
the projection and a := tt(Dx~ dc s D ). Write V™ — a = ]X=i 5» with pairwise 
coprime monic polynomials G k[Y]. Then we can choose hi = gi(yx~ dcsD / n ) 
or hi = g % (yx~ dcgD/n ) + x~ x . Note that degg, = degP t < n. 

(3) gcd(degD, rt) =: d G {2, . . . , n — 1}, in which case there are up to d infi- 
nite places which are all ramified. Let n : Ooo —> k be the projection and 
a := ir(Dx~ dcsD ). Write Y d — a = ]X =1 <?; with pairwise coprime monic 
polynomials G 

Next, in case degD > 0, write 1 = -s^f^ + V± with s,t € Z and < 
s < | and < t < ^§-^; then v Pi {y s x~ l ) = 1. In case degD < 0, write 

1 = s ~ d ° g g + if with s,i G Z and < s < § and < i < 0; then 

^ {y s x~ t ) = l. 

In both cases, we can choose /ii = gi(y n / d x~ dc s- D / d ) + y s x~ t . Note that 
deg 3i = deg P; < d. 

Now let G be monic and of minimal degree with d^Mi G k[x] nxn . Using 
Lemma 15.21 we can give upper bounds for degdi and deg(djMj). We are only 
interested in quantitative results, but note that one can work out sharper bounds 
in detail using the above material. All involved O-constants do not depend on n or 
D. We have the same three cases as above: 

(1) Note that in this case, 6 m i n = b max = — t + — degD, whence we have |6 m i n | = 
\b max \=0(\degD\). 

(2) In this case, & m i n = — 1 and 6 max = (as <?i(0) ^ 0). 
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(3) Here, we have 1 - (± - ±)\degD\ < b min < b max < -1 + (\ - ±)\degD\ (as 
, 9l (0) t^O). Therefore, \b 

min | •> | ^max 

Applying the lemma, we obtain 

degd, = 0(D dcg ) and deg(d,M 4 ) = 0(D dcg ) 

in all cases. 

Instead of repeating the same investigation for the inverses Mr , we use some 
results from Linear Algebra. For a matrix M £ R nxn , where R is any commutative 
unitary ring, one can define the adjugate matrix adj(M) £ R nxn which satisfies 
adj(M)M = Madj(M) = det(M) • I n , where I n is the n x n identity matrix. The 
elements of adj(M) are cofactors of M, i.e. up to sign determinants of (n — 1) x (n — 
1) submatrices of M. Hence, if M £ k[x] nxn and we consider the Leibniz formula 
for the determinant, we get degadj(M) < (n— 1) degM. Therefore, if M £ k(x) nxn 
and d £ k[x] \ {0} is monic and of minimal degree with dM £ k[x] nxn , then 

M- 1 = d(dM)- 1 = ddct(dM)- 1 adj(rfM) = tM adj(rfM). 

Hence, if d' £ k[x] \ {0} is monic and of minimal degree with d! M~ x C k[x] nxn , we 
have 

deg d! < (n — 1) deg d + maxjdeg det M, 0} 

and 

deg(d'M _1 ) < max{-degdetM,0} + (n - l)deg(dM). 
We can use this to show our quantitative result: 

Proposition 4. Now, if M — M** for some i and U £ Z, and d £ k[x]\ {0} is 
monic and of minimal degree with dM £ k[x] nxn , then 

degd = 0{\U\nD maK ) and deg(dM) = 0(\U\nD mlix ). 

In case ti > 0, we get the stronger result 

degd = e>(iiAnax) and deg(dM) = 0(tiD max ). 

Proof. Let d- £ k[x] \ {0} be monic and of minimal degree such that d\M~ x £ 
k[x] nxn . Note that detM^ — Norni^/^.,.) (hi) equals the norm of h i: whence 
^^(detMi) = degPi, i.e. degdetMj = — dcgP^. Using the above results, we 
see that 

degc^ = 0(nD max ) and degd^Mr 1 = 0(nD max ). 

First, assume that ti > 0. Then M = M*% and we can choose d — cfy . Hence, 
deg dM — tidcgdiMi — 0(tiD max ) and degd = 0(tiD max ) from the above dis- 
cussion. Next, assume that ti < 0. In that case, M = (Mr )" tf , and we can 
choose d = (d-) - * 4 . Hence, deg dM = (-ti) deg d- Mr 1 = 0((-i;)n.D max ) and 
degd = 0((-U)nD max ). □ 

This shows that the matrices we can use to represent infinite places can be 
given using n 2 + 1 polynomials whose degree is in 0(nZ? max ). If we have any 
selection of integers ti,...,t s £ Z, then Wl^M^ can be written in the form 
M/d with M £ k[x] nxn and d £ k[x] such that all involved polynomials are of 
degree 0(D dcg n J2i=i We use this to show a bound on the running time of 
Ricmann-Roch space computations in the next section. 
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6. Computation of Riemann-Roch Spaces 

This section is very central in this paper: it combines everything prepared so far 
to show how to compute Riemann-Roch spaces in radical function fields over finite 
constant fields, and gives an estimate on the running time. Part of the material 
from this section will be used in the next section to compute the exact constant 
field of K/k(x). The algorithm we will use in this section is based on an algorithm 
of F. Hefi [HcfiQ2j, and is also described in [Fon09j. The main results in this section 
are given in Proposition [5] and its corollary. 

Assume that the infinite places are pi,...,p s . Let a be a non-zero O-ideal and 
U S Z, 1 < i < s. We are interested in computing a /c-basis of 

B(a, (h, t.)) := {/ e a | v 9i {f) > -U, 1 < i < s}. 

If o = Ilpfp ( m p ^ 0) n * is the factorization of a into prime ideals of O, then 
B(a, (ti, . . . , t s )) is exactly the Riemann-Roch space 

Note that any divisor of K can be represented in such a form; also see |Die081 
Section 2.5]. 

Now v., :— y z /Di, < i < n is an integral basis for O by Theorem 14.11 Next, a 

I ■ - deg D I 

Ooo-basis for is given by to, := x^ 1 ™ iy l , < i < n by Proposition [TJ Now, 

if M £ k(x) nxn satisfies (vq, . . . , = (wqi ■ ■ ■ i w n -i)M, then M = (my )y with 

r. deg d i 

rriij = for i ^ j, and ma — x\ 1 ™ > / Di. 
Write 

V ' i=0 \j=0 J 

with dega^j < deg an for j < i, the a^'s being monic, and (a) monic of minimal 
degree. Set T a := {j^j a ij)ij with ay = for j > i; then vq, . . . ,f n -i is a k[x\- 
basis of a if we set (v , ■ ■ ■ , Un-i) := (vq, v n -i)T a = (w , . . . , w n -i)MT a . If 
M a := MT a = (m y )y, then 

r.; dog g i 
^ Qy a ij x n 



Next, we need elements hi £ Goo with v Vi {hi) — 1 and VpAhi) — for j 7^ i. 
Then, we can define Mi by (hiWo, . . . , hiw n -i) — {wq, . . . , i& n _i)Mj and M((U)i) := 
rii=i ■ We already discussed how to find such elements in Proposition[2]and the 
previous section. Now we can apply the Reduction Algorithm of Paulus [Pau98j to 
the matrix M{(ti)i)M a . There exists two matrices U £ Gl n (Ooo) and V £ Gl n (k[x}) 
such that 

/x Xl ••• \ 



UM((ti)i)M a V = 



'•■ •■ : 

: '■• '■• 

\ • • • x A "/ 
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with Ai, . . . , A„ G Z. Actually, the algorithm computes M((U)i)M a V, the Xi can 
be recovered as the maximal degree appearing in the i-th column of that matrix, 
and the algorithm can easily be modified to explicitly compute V as well with- 
out affecting the asymptotic running time. Now, if we compute (vq, . . . , v n -i) = 
(vo, ■ ■ ■ ,v n -i)V = (Vi, .. . , v n )T a V, then a fc-basis of B(a, (ti, . . . , t s )) is given by 

{x j Vi \0<i <n, < j - Xi}. 

In the rest of the section, we are interested in estimating the running time. Recall 
that we defined deg A = maXjj deg for a matrix A = (a,ij)ij G k(x) nxn . The run- 
ning time of Paulus' algorithm, applied to a matrix A G k[x] nxn , is C(n 4 (deg A) 2 ) 
operations in k; see |Pau98[ Proposition 3.3]. 

First, let us write M a = \M' a with M' a G k[x} nxn and d G A;[x]. For that, note 

that p g ) " m = rij=-oo fj ^"^ rijli /j ^™^ + "' G fc[af]; this shows that we can choose 
<2 = D mm d{a). Set M£ := dAf a G k[x] nxn . Then 

i deg D 



deg M a = max deg 

zj— 0,...,n— 1 



deg A + deg D n 



< max deg dij + maxjdeg D, 0} + deg D num 

0,...,n— 1 

= 0(degd(a)T a + J D dcg ) 

and 

degci = degci(a) + degD num . 
Next, using Proposition 2] we see that if d! G is monic and of minimal degree 
with d'M({U)i) G fc[x] nx ™, then 

degd' =o(Y1 l^l^deg) and deg(dfM((U)i)) = o(£ N^AiegY 

Proposition 5. Let a be an O-ideal of K represented with respect to the k[x]-basis 
y°/D , . . . , y n - 1 /D n ^ 1 ofO as M/d with M G k[x] nxn and d G k[x\. Moreover, let 
ii, . . . , t s G Z be integers. Then the running time required for computing a k-basis 
of 

pfPoo i=l 



0^n+ naax{0,log|t i |}Jn 3 ^l+n^|t i |J J D d eg + degM 

operations in k, and requires a storage of 

O (n 2 (Jl+n^2 ^deg + deg Af 
elements of k. 

Proof. We assume that the result is given in a 'compact form', i.e. £>; is only given 
once and not for every power of x multiplied to it. Moreover, each element in the 
result has to be divided by d(a). 

Note that the given running time and space requirements essentially describe 
the running time of Paulus' algorithm and the matrix dd'M((ti)i)M a . Clearly, the 
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storage required for matrix multiplications is at most a constant multiple of the 
storage for one matrix. 

For computation of a fc-basis, we also have to construct the matrix M((ti)i)M a 
first by multiplying all required matrices together, and then, after applying Paulus' 
algorithm, collecting the information from the algorithm to compose the A;-basis of 
the Riemann-Roch space. 

Note that multiplying two matrices A,Be k[x] nxn requires 0(n 3 (degA + 
degi?) 2 ) operations in k. Hence, we have to show that the number of matrix 
multiplications is 0(n + Yli=i s max {0 ; log \ti\})- 

The last step requires multiplication of the matrix V obtained from Paulus' 
algorithm with the basis (vq, . . . , u n _i) = (vq, . . . , u„_i)M. The matrix obtained 
from Paulus' algorithm is of the same size as the input matrix, i.e. the entries are 
of degree 



°\ ( 1 + Wg + degM 



i=l 

Multiplying it by M and by the elements f)j shows that the result is of the same 
size. Here, two matrix multiplications are required. 

Finally, for computing M a , every entry of M is multiplied with a polynomial; 
the running time is less than the running time for one matrix multiplication. For 
computation of M((tj)j), one requires 0(^^ =1 (max{log \ti\, 0} + 1)) matrix mul- 
tiplications, and multiplying M((ti)i) with M a requires a last one. As s < n, the 
claim follows. □ 

Noting that 2Z| =1 logmax{|ti|, 1} < slogmax{^ =1 and s < n, we get 

the following special case: 

Corollary 3. In case there exists some G > with deg M = 0(nG) and^2, 8 i=l \ti\ = 
0(G), then the running time is 

0(n 6 D 2 dcg G 2 log G) 
operations in k and the storage requirement is 

0(n 3 GD dce ) 

elements of k. □ 

Note that in case a is a product of at most two reduced ideals and the sum of 
the |ij|'s is 0(g), where g is the genus of K/k, we see that we can choose G = g (see 
|Fon09j ). In particular, the running time required for a giant step or a reduction 
in the sense of |Fon09j is 

0(n e Dl g g 2 (log gf) 

operations in k. In Corollary [4] we will see that g = 0(?iDdeg), whence we obtain 
the running time 

0(n 8 ^ og (logn + logD dcg ) 2 ). 

This is a much more precise estimate than the standard estimates as in |Die08j that 
arithmetic is polynomial in n, g and the size of the representation of K; the latter 
is in this case bounded by 2D dcg . 



20 



FELIX FONTEIN 



7. Computing the Exact Constant Field 



In this section we will give an explicit description of the exact constant field k! 
of K/k(x), using the methods from the previous section on the computation of 
Riemann-Roch spaces. Note that k' — L(0), the Riemann-Roch space of the zero 
divisor. For the main result, sec Theorem LL2J 



To compute L(0), consider the matrix M — (niy)^ with rriij = for i =/= j 

r ■ dog D "I . . 

and ma = x* 1 ™ '/Di. Applying Paulus' algorithm Pau98J to this matrix will 
return the matrix itself. Let Aj := degm^. Hence, a fc-basis of L(0) is given by 



•deg_D 



{viX^ | < j < — Aj,0 < i < n}. Obviously, — Aj = degDi 

— Ao = 0, which is not surprising after all as vo = 1 <E L(Q) and x £ L(0). 
Therefore, we have 



Clearly, 



dim fc L(0) = 1 



71-1 

E ] 

i=l 



max <1 + deg Di 



.degD 



and a fc-basis of L(0) is given by x^ii with < i < n and j = 0, . . . , max ^ deg Di 



■ degD 



Now by Lemma T4.2I fa). degDi 
lowing result: 
Proposition 6. We have 



•dcg_D 



< 0. Combining all this, we get the fol- 



ding L(0) - 
and a basis is given by 
1, 



1 



1 < i < n, deg Di 



'.degD' 




i 


} 


n 





Di 



1 < i < n, deg Di 



.degD 



□ 



Our next aim is to describe the occurring integers i more precisely. Now Lemma [4.2l fb) 



says that deg Di < 



■dcg_D 



if, and only if, there exists a j € Z with deg fj > and 



n\ ij. This condition can be described in an easier way: 

Lemma 7.1. Let n G N>o and S C Z be a non-empty subset. Then, for a fixed i € 

Z, 

(*) 3j € 5 : n { ij 

is satisfied ij, and only if, 

n\igcd{n,j \ j £ S). 

Proof. Define A :— C\j e s ged "„ Z. We first show that (*) is equivalent to i ^ A. 
Note that nZCA 

For that, assume (*). Then, by assumption, there exists a j £ 5 with n j" ij, 
whence 



\ i. But then, i g A. 



gcd(nj') 

Now, assume that i £ A. Then there exists at least one j £ S with i g" Jcd " n ^ Z, 
which means „ cd ™ n jj | i, i.e. n\ij. Therefore, (*) holds. 

Thus, we have that (*) is equivalent to i A. Now let us study A. Clearly, 



gcd(n, j) 



-Z = 1cm 



?cd(n, j) 



j e 5* z 
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Since n is a common multiple of the gcd " n j\ , 3 G S, the 1cm must be of the form 
j, £ £ {1, ... , n}. Now gcd "„ j} | j if, and only if, I | gcd(n,j). Therefore, 



lem 



;cd(n, j) 



gcd(gcd(n, j) \jeS) 



Moreover, note that gcd(gcd(n, j) \ j G S) = gcd(n,j \ j G S). Summing up 
what we have so far, we get that (*) is equivalent to i £ gcdTn^UgSl ^' ^' e ' ^° 
n\ igcd(n,j \ j G S). □ 

Now we can give a precise statement on the exact constant field: 
Theorem 7.2. We have 

[k' : k] = dims, k! = \{i G {0, . . . , n — 1} | n divides igcd(n,j \ fj ^ 1)}| 
= gcd(n, j | ^ 1). 

Moreover, a k-basis of k! is given by 



y_ 

D, 



ft 

i e {0, . . . , n - 1}, — divides i 

gcd(n,j | fj 1) 



where -g- = 1. In particular, k is the exact constant field of K if, and only if, 
gcd(n,j\f j ^l) = l. □ 

This gives an easy to evaluate formula to decide whether k is the exact constant 
field of K/k, and if not, to compute a /c-basis of the exact constant field. In case 
gcd(?i, j | fj ^ 1) > 1, k' = k(y l /Di) with i = gcd(w jjj^rj ■ Not e that the minimal 

polynomial of y % jDi over is given by T"/' 2^; but since [A;' : k] — n/i, it 

must as well be the minimal polynomial of y 1 / ' Di over k, whence ^ G fc. This 
can be directly verified: since fj — 1 for j ^ jZ, 

oo oo „ 

II / : II /; 




3 sqn(D) ' 

J — — OQ J — ^OQ 



We see that y 1 jDi = n/ y/sgn(D), i.e. 



k' = k( n tysgn{D)) = k{sgn{D) l l ^ cA{ - n ^^ V >). 

This is also not very surprisingly, as Y n — D G fc(x)[Y"] is not irreducibe over 
kisgniD) 1 ' ' ert( n >3\fj&))[Y] (compare Section CU]) ; finally, K/k'(x) is defined by 
K = k'{x,y) with the relation y % = D{x), where 



oo 



D:=sgn(Dy/ n [] ft - — D(xy^ n G k'{x). 

j=—oo 

8. Computing the Degree of the Different and the Genus 

In this section we give two ways to compute the genus of K/k(x): one method 
is to compute the degree of the different and using the Riemann-Hurwitz formula. 
The second method is more general applicable and is based on F. Hefi' method on 
computing Riemann-Roch spaces: for the Riemann-Roch space algorithm, a special 
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matrix has to be computed using an integral basis of O and Ooo- We show how 
one can extract the genus from this matrix using the Riemann-Roch theorem. 

Since all ramification is tame, the different of Kjk(x) and its degree can be com- 
puted using the ramification indices. For the ramification indices, we need the fac- 
torization of D, or at least we need to know the valuations and degrees of the appear- 
ing places. For that, recall that D = sgn(L>) IlS-oo ft with ••■■> f-%> h, ■ ■ ■ 
a sequence of squarefree, pairwise coprime elements of k[x]. Then, by |Sti93[ p. Ill, 
Proposition III. 7. 3 (c)], 

gcd(n,f p (£>))* 



degDiff(.fi:/fc(x)) = 



[k' : k 



[k' : k] 



E 

OO 

E 

i— — oo 



l - 



(n-gcd(n,i))deg/ I 



cleg p 



where k! is the exact constant field of K/k(x). The different itself can be computed 
in the same spirit, by factoring the /j's into a product of irreducible polynomials 
and determining the different exponents by the formula cZ(?P | p) = o . ed ^ i " — 1. 

Using the Hurwitz Genus Formula and the previous section, the genus g of F 
equals 



.9 = 1 



1 



[k 1 : k] 



idegDiff(X/fc(x)) 



1 



gcd(n, j \fj^l) \ 
In particular, this shows: 
Corollary 4. We have g — 0(nD^ C g). 



oo 

E 

>,=— OO 



(n - gcd(n,i))deg/ I 



□ 



A second way to compute the genus is at follows. It is essentially based on Hefi' 
idea on computing Riemann-Roch spaces together with the fact that for divisors D 
of large enough degree, dim^ L(D) = degD + [k' : k](l — g) by the Riemann-Roch 
theorem. This idea can be applied to any function field where a matrix M € 
k(x) nxn is known which transforms a Ooo-basis of Ooo into a fc[a;]-basis of O. 

Note that the algorithm of Hefi does not only computes a fc-basis of L(D) for 
some divisor D, but a /c-basis of L(D + t(x)oo) for any t E Z; here, (x)oo denotes 
the pole divisor of x. If t > is large enough, dim^ L{t{x)oo) = deg(t(x)oo) + [k' : 
k](l — g) — nt+ [k' : k](l — g), whence 



9 = 



- d imfc L(t(x)oo) + tn 
[k 1 : k] 



+ 1. 



Now, by the discussion in the previous section and [HeB02 , 

n— 1 r 

dimfe L(t(x)oo) = 1 + max < 1 + dcg Di — 

i=i 

hence, if t is large enough, 

n — 1 / 

dim fc L{t(x)oo) = 1 + n + ^ I deg A - 



dcg D 




i 


+ t,oj 


n 




degD 








) 


+ tn, 


n 
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whence 



= 1 



; de S D 



deg D, 



gcd(n, j | fj 1) 



Note that this method can be used for any function field, as long as integral bases 
of O and Ooo are known. As one uses D — 0, one obtains [k' : k] = dirm.£(0), 
whence being able to compute integral bases and Ricmann-Roch spaces suffices to 
compute k' , [k' : k] and <?. 



9. Euler Product Approximation 

In this section, we want to discuss Euler product approximation for radical func- 
tion fields. The Euler product is another representation of the zeta function based 
on the places of K. We use the fact that the zeta function gives the L-polynomial 
of K, which in turn provides a way to compute the class number when evaluated at 
t = 1. In the following, we assume that k = k' = ¥ q is a finite field of q elements, 
as well as the exact constant field of K/k; we have seen in the previous sections 
how to reduce to this case. 

We begin with giving the Euler product, divided by the Euler product represen- 
tation of the zeta function of k(x), via its factors. For p G Pfe(x)) define 

S(p)(t) ■= (i-' dcsp )n7-^r 

SPlP 

We then have that 

n s(p)(t) = L K (t) g zm 

is the L-polynomial of K. It satisfies the functional equation Lx{t) = q 9 t 2g 'L((qt)~ l ) 
and, more importantly, we have |Pic°(-ftT)| = Lx(l)- Note that we cannot evalu- 
ate Lk(1) directly using the above product representation. But using the func- 
tional equation, we get Lk(1) = q 9 L(q~ 1 ), and S(p)(q~ 1 ) is well-defined for ev- 
ery p G P^). Using the results from [SS09], we can determine the error if we only 
consider all places p G Pk(x) with degp < A in the product. For a A G N define 
E 2 {\) by 

\ogE 2 {X)=g\ogq + \og [] S^q' 1 ) = glogq- £ (- log ^(p)^- 1 )) 

P£ p k( x ) P eP fc(oi) 
dcgp<A dcgp<A 

= g\ogq-J2 E (E 1 °g( 1 -^ dCS<P )- 1 °g( 1 -^ d0SP ))- 

deg p— v 

In [5S091 Theorem 4.2 and Theorem 4.3], bounds are given on \E 2 (X) - |F*ic°(^r) 1 1 
which are of size (D(q 9 ~( x+1 ^ 2 ), one of them being: 

Theorem 9.1 (Scheidler-Stein |SS09| ). Let k = ¥ q be the exact constant field of 
K/k, and n — [K : k{x)]. We then have 

\E 2 {\) - |Pic°(X)l] < E 2 {\){e^^ - 1), 
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where i is the smallest prime divisor of A + 1 and 



A + l 



A + 1 g - 1 g A + 1 A + 1 



2g v 7 ^ — ^±2 , 2(n — 1) g 



A + 2^g-l 



A + 2 g-lg 1 -?-! 



-(l-f)(A+2) 



Proof. We have to show that our definition of £2 (A) coincides with the definition 
in [SH091 Theorem 4.2]; we denote their £ 2 (A) by E 2 (A). Then 



m=A+l 



rag" 



A 00 

io g E 2 (A)=A(x)+£-— E ^E^(v) 

with A(K) = g\ogq + logS(p 00 )(q~ 1 ) and 



n-l 



dcg p = o i — \ 
p finite 



where z/(p) is defined by 



1 1 1 n ~ 1 1 

1 _^egp ,s '(p)w = n 1 _tdcg^ = 1 _ t dog P n i- z j ( 



(p)idogp' 



Now 



£2 (A) 
expA(if) 



exp 



A 00 

E^E^(v)+ E 



m=A+l 



n-l 



/ 



n ii ex p(^(™))^= n n n n^p^ 



m/i/\ 



n-l 



m — 1 v\m dcgp=v t — 1 
^<A p finite 



n nMEi 



1 



dcg p < A j — 1 
p finite 



m \q' 



7 dcgp 



n n^pf- 1 ^! 1 



dcg p < A j—1 
p finite 



gj(p) 

7 dcg p 



n n s (p)(i~^ 



V=\ dog p = v 
p finite 



whence E2 (A) = E 2 (X). 



□ 



Before discussing how to compute the — log 5(p)(q~ 1 )'s, we want to discuss the 
subject of numerical approximation. To compute logi?2(A), we need to add a huge 
number of logarithms of rational numbers 7^ 1, i.e. of transcendental numbers. But 
we have an advantage, namely all appearing logarithms are integral multiples of 
log(l — q~ l ) for i S {1, ... ,n\}. In general, nX <C q x , whence it makes sense to 
write 

log ^ 2 (A) = .glog g + E^ 1 °g( 1 -^ i ) 
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with bi 6 Z, and to first compute the coefficients bi £ 1 - for which no approxima- 
tion is needed - and then use the bi to compute an approximation of log £"2 (A). In 
particular, once we know bi, it is easier to determine the precision of log(l — q~ l ) 
that is required to compute logi?2(A) with the wanted precision. Moreover, no 
floating point operation is required during the determination of the bi, only integer 
arithmetic and finite field arithmetic. This improves the approach made in [SS09J. 

Now, let us discuss how we can compute S(p)(t) for a place p £ Pk(x)', for that, 
we use material from Sections [2] and [3l Let d p := gcd(n, v p (D)). If d p = 1, we have 
S(p)(t) = (1 — £)y^7 = 1 as p ramifies totally. In case d p > 1, let F : o p — > «(p) 
be the projection, n a uniformizer for p and a p := F{Dtt^ Vv ^ d ^) £ «(p)*- Then 
the factorization of f p := Y d — a p £ n(p)[Y] determines S(p). We have seen 
that /p is squarefree. In particular, we can effectively compute the deg^'s using 
Algorithm 13.31 We get the following algorithms and results: 

Proposition 7. Assume that k = ¥ q is the exact constant field of K , and assume 
that D £ k[x] and logn = O(\ogq). Given a finite place p £ Vk(x)> the following 
algorithm computes the coefficients cii of — log S(p)(q^ 1 ) = Y^—i a>i log(l — <7~ ldegp ) 
in 

C((degp) 2 log 3 g- (n + degp • (loglogq + logdegp)) + (degD) 2 log 2 q) 

binary operations, assuming we know the factorization of q de& p — 1 and the one of 
p — 1 for every prime p | (<7 dcgp — 1). For almost all places, the algorithm needs in 
fact just 

C((degp) 2 log 3 q ■ (n + degp • (loglogq + logdegp)) + degp degDlog 2 q) 
binary operations. 

Algorithm 9.2: Compute — log5(p)(q _1 ) for a finite place p £ 

iMzl , 

Input: n, D £ ¥ q [x\, p given in form of an irreducible polynomial 

p£¥ q [x] 

Output: — logS'(p)(q _1 ) = J27=i a i l°g( 1— <7~ jdcsp ) in terms ofa 1: 

(1) Sett :=0. 

(2) Compute D = qp + r with q,r £ ¥ q [x], degr < degp. 

(3) Ifr = {): 

(a) Set D := q. 

(b) Set t:=t+l. 

(c) Go to Step (2). 

(4) Compute d := gcd(n, t). 

(5) If d = 1, return = 0. 

(6) Use Alaorithm \3.S\ to compute the degrees of the irreducible factors 
of Y d — r in (¥ q [x] / (p) ) [Y ] . let ai be the number of irreducible 
factors of degree i over ¥ q [x]/(p). 

(7) Set a 1 :— a\ — 1. 



For the infinite place poo of k(x), the following algorithm computes the coeffi- 
cients ai of -log S^OT 1 ) = ]T" =1 a 4 log(l-g- 4dcsp ) m ©((n+loglogq) log 3 q) bi- 
nary operations under the same assumptions as above: 
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Algorithm 9.3: Compute — log5(p)(q 1 ) for the infinite place 
of fcQ) 

Input: n, D € F g |xJ 

Output: — logS'(p)(q _1 ) = J27=i fli log(l— g _ldcs '') in terms ofa\, 

(1) Compute d := gcd(n, deg D). 

(2) If d= 1, return on = 0. 

(3) t/se Alaorithm \3.3\ to compute the degrees of the irreducible factors 
ofY d — sgn(D) iiiFjl']. Leta.i be the number of irreducible factors 
of degree i over ¥ q . 

(4) Set ai := a\ — 1. 



Proof. Let us first estimate the time required to compute a = Dp v v^ D ^ mod p in 
Algorithm i-e. for Steps (l)-(3). We have v p (D) = C(deg D/ degp), and in 
the t-th (beginning with t — 0) iteration of Step (2) we have deg£> t = deg£>o — 
tdegp, where D t is the value of D in the t-th. iteration. Computing a long division 
needs (degp deg Z? t ) operations in ¥ q |Coh96[ Section 3.1.3], whence we need 
C((degD/degp) 2 (degp) 2 ) = 0((deg£>) 2 ) operations in F 9 to obtain t = v p (D) 
and r = Dp~* modp. Note that in case t — 0, we just need 0(degD • degp) 
operations. Moreover, note that for Algorithm 19.31 the corresponding steps need 
no time as a — sgn(D) and v v (D) = — dcgD. 

The finite field ¥ q in Algorithm [3J] is k(p) = ¥ q [x]/(p), whence it has q dc sP = 
qdcgp e i ernen ^ s _ Hence, by Proposition [31 the computation of the deg^J's requires 
O(nlog 3 n + nlogn ■ (degp) 2 log 2 q + (degp) 3 log 3 q ■ (log log q + log deg p)) binary 
operations. Using logn = (D(\ogq), this simplifies to C((degp) 2 log 3 q ■ (n + degp • 
(loglogq + log degp))). □ 

Next, we want to discuss the question on how to enumerate all monic irre- 
ducible polynomials p £ V q [x] with degp < A. It is well-known that there are 

+ 0(q d l 2 /d) monic irreducible polynomials in ¥ q [x] of degree d. (For d = 1, ev- 
ery polynomial is irreducible.) The total number of monic polynomials of degree d 
is q d , whence it makes sense to try all monic polynomials and use a irreducibil- 
ity test; according to |vzGG03| Section 14.9], this can be done in 0((M(d) logg + 
(d 1 ' 688 + d 1 / 2 M(d))8{d) log d) log 2 q) binary operations; using Karatsuba's method, 
one has M{d) = 0(d 159 ) |vzGG03| p. 242], and 6(d) < log 2 d, whence we get a 
total running time of 

0{d 159 log 3 q + d 2m log 2 d ■ log 2 q) 

for one irreducibility test. Hence, we get a running time of 

0{q d d l r ° 9 log 3 q + q d d 2 09 log 2 d ■ log 2 q) 

to enumerate all monic irreducible polynomials of degree d over ¥ q . Note that 
the running time for one irreducibility check is dominated by the running time for 
Algorithm 19.21 applied to any irreducible polynomial of degree d. 

Theorem 9.4. Assume that k = ¥ q is the exact constant field of K . Let A € 
{1, 2, . . . , g}. The following algorithm computes the Euler product approximation 

e 2 (\)= n s(pxiaz) 

deg p < A 
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i2.09 

"I" J-'deg T < 

binary operations, assuming logn = 0(\ogq): 



0{\q X [An log q + A 2 log q ■ log(A log q) + D dcg + A log 2 A] log 2 q) 



Algorithm 9.5: Compute the Euler product approximation E2M 
Input: n, \, and the squarefree decomposition D = sgn(D) 0i=-oo fl 
ofD 

Output: £2 (A) for the function field K : y n = D(x) 

(1) Compute D :^sgn{D) ■]\^_ OQ fl modn ^W q [x\. When calling the 
algorithms to compute — log S(p)(q~ ), use D instead of D. 

(2) Set a% := ■ ■ ■ := a\ n := 0. 

(3) For v = 1, . . . , A do: 

(a) Factor v , factor q v — 1 and, for every prime p dividing q" — 1, 
factor p — 1 . 

(b) Ifu=l, compute - logS^)^ -1 ) = £™ =1 Mog(l - g _< ), 
where poo is i/ie infinite place of k(x), using Algorithm Iff. 51 
and sei a* := 1 < i < n. 

(c) For every monic polynomial f € ^q[x] with deg/ = ^ do: 

(1) Tesi whether f is irreducible; if this is not the case, 
continue with the next choice of f. 

(2) Compute- log Si^iq- 1 ) = EtiMogfl-g-"), where 
p is the finite place of k{x) belonging to f, using Algo- 
rithm UTM and set a v i := a v i + 6j, 1 < i < n. 

(4) Compute r := glogq- £)" =1 a 2 log(l - g _l ). 

(5) Compute and return exp(r). 



Proof. The correctness follows from the previous discussion. What is left is to esti- 
mate the running time. First, note that for almost all computations of — log S(p)(q~ 1 ), 
we have v v (D) = 0. The number of possible exceptions is bounded by °- e & & 

C(-Ddog); these are exactly the places of k(x) which ramify in K . 

We can ignore the running time required for the infinite place of k(x), as there is 
only one, compared to the q finite places of degree one. Moreover, the factorization 
in Step (3 a) can be ignored. 

We have seen above that there are ~q" + <D(q v / 2 ) monic irreducible polynomials 
of degree u, whence the time spent in Step (3 c 2) for a fixed v equals 0(q u [vn log q+ 
v 2 log • log(V logg) + -Ddog] log 2 q) binary operations (in all but at most 0(Dd eg ) 
cases). 

In contrast, the time to enumerate all these polynomials is 0(q u i/ 1 ' 59 (log q) 3 + 
g"i/ 2-09 (logi/) 2 (log<7) 2 ). Therefore, the total running time for Step (3 c) is 

0(q v [vn log q + v 2 logq- log(u log q) + D dcg + v 2m log 2 v\ log 2 q) . 
Hence, one obtains a total running time of 

0(\q x [An log q + A 2 log q • log(A log q) + D dcg + A 2 ' 09 log 2 A] log 2 q) 
for Step (3). 

Finally, we have to estimate the running time for Steps (4) and (5). All a, are 
bounded by n times the number of places of k(x) of degree < A; hence, |a,| < 
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Moreover, by Theorem l9. H and the Hasse-Weil bounds i?2(A) is of order of magni- 
tude q 9 . To compute £2 (A) with error < i, we therefore need to compute log-E 2 (A) 
with error < log(l + 2 (i+]/q)*9 )• We have nX + 1 terms to add for log-E^A), 

whence it suffices to compute each term with error < l+nx^^ 9 - - Each term 

can be bounded by glogq resp. nXq x , whence we need a precision of at most 

log 2 (nAq A ) - log 2 l0S(1+ 1 2 ^ ) ^ a) < Alog 2 q + 21og 2 (nA) + 2 + 2 5 log 2 (l + Jq) = 
O(glogq) bits as A < g. fn particular, the computational costs for computing the 
approximation of E 2 (X) out of the cij's are polynomial in glogq and are irrelevant 
compared to the costs of Step (3). □ 

If we assume that n, D^ eg and A stay bounded while q grows, we obtain a running 
time of 0(q x log 3 q ■ log log q) binary operations. This makes the statements on the 
running time of computing Euler product approximations in SS09] more precise 
for the case of radical function fields. 



10. Conclusion 

In this paper, we have described explicit methods which allow to implement 
arithmetic in radical function fields. We have presented methods to 

(a) compute integral bases for 0' p , p € Pk(x)] 

(b) compute all places of K lying above p G Pfc( x ) as well as generators of their 
corresponding prime ideal in 0' p ; 

(c) compute a simple integral basis for O, the integral closure of k[x] in K; 

(d) compute Riemann-Roch spaces; 

(e) compute the exact constant field, its degree and a generator of it over k; 

(f) compute the genus; 

(g) approximate the divisor class number | Pic (if)] using an Euler product ap- 
proximation. 

The integral bases are given in a very explicit form; they can be written down know- 
ing only n, a uniformizer ir, v p (D), respectively n and the squarefree factorization 
of D. For most computations, bounds on the running time and storage space are 
given. 

This allows to implement arithmetic in radical funtion field, assuming that a 
library for working with polynomials over finite fields such as NTL0 is available. 
Using infrastructure methods (see |Fon09j ) or the methods described in |Die08| 
Section 2], one can do effective arithmetic in the divisor class group Pic (if). 

Some of these results were already known in special cases; for example, in case D 
is a squarefree polynomial and gcd(deg£>, n) — 1, the function field is superelliptic, 
and arithmetic in it is described in [GPS02] . Under the assumption that D is 
a polynomial not divisible by any n-th power, the formula for an integral basis 
was given in |Wu09j . Our approach generalizes both results. The Riemann-Roch 
space computation was described for general function fields [He602 , as well as the 
Euler product approximation |SS09| . Our approach makes the running time bounds 
more precise, and in the case of the Euler product approximation, improves on the 
original algorithm by making it more robust to approximation errors, as well as 
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easier to implement as one does not have to compute the Zj(p) , s as well as handle 
the Su(i)'s and the infinite series involving them. 
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